kitos f54dc0d342 fix(deps): pin minimum safe versions in requirements.txt to fix Snyk dashboard alerts ...

Snyk platform was resolving unpinned deps to old vulnerable versions.
All minimum versions match current production installs (from requirements-lock.txt).
Key security fixes reflected:
- PyJWT>=2.13.0 (fixes CWE-287 Improper Authentication, CWE-326, CWE-347)
- python-multipart>=0.0.32 (fixes CWE-22 Directory Traversal, CWE-770)
- fastapi>=0.136.3 (fixes CWE-1333 ReDoS)
- requests>=2.34.2 (fixes CWE-201, CWE-377, CWE-670)
- lxml>=6.1.1 (fixes CWE-611 XXE Injection)

2026-06-12 13:02:14 +02:00

..

alembic

feat(evaluations): ATT&CK Evaluations importer for CrowdStrike Falcon [FASE-6.1]

2026-06-05 15:57:03 +02:00

app

fix(security): resolve Snyk/bandit code analysis findings

2026-06-12 12:59:11 +02:00

tests

fix(tests): fix 15 pytest failures across 4 failure groups

2026-06-12 11:36:10 +02:00

.bandit

fix(.bandit): use YAML format for bandit config (was INI, caused parse error)

2026-06-12 12:59:58 +02:00

.dockerignore

fix: add .dockerignore files to exclude node_modules from build

2026-02-06 16:59:50 +01:00

alembic.ini

feat: Phase 0 - Infrastructure and scaffolding (T-001 to T-003)

2026-02-06 11:28:30 +01:00

Dockerfile

fix(docker): apply OS security patches via apt-get upgrade in backend image

2026-06-12 12:48:15 +02:00

entrypoint.prod.sh

feat: production deployment setup and hardcoded URL fixes

2026-02-10 16:04:16 +01:00

entrypoint.sh

fix: D3FEND expandable cards, System page cleanup, and multi-source improvements

2026-02-10 13:22:23 +01:00

pytest.ini

feat(phase-32): add automated tests V3 for data sources, scoring, campaigns and snapshots (T-235 to T-237)

2026-02-10 09:07:43 +01:00

requirements-lock.txt

feat(security): add Snyk CI workflow and pinned Python requirements

2026-06-12 12:26:16 +02:00

requirements.txt

fix(deps): pin minimum safe versions in requirements.txt to fix Snyk dashboard alerts

2026-06-12 13:02:14 +02:00

ruff.toml

fix(lint): resolve 2132 ruff errors to pass CI lint-and-test job

2026-06-12 10:47:48 +02:00